registry / claude-yes / 1.162.0

claude-yes@1.162.0

A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 140 file(s), 1.11 MB of source, external domains: 127.0.0.1, 192.168.1.5, agent-yes.com, ay.local, example.com, github.com, raw.githubusercontent.com, registry.npmjs.org, rtc.live.cloudflare.com, rustup.rs

Source & flagged code

9 flagged

dist/tray-BMzpUSfa.jsView file

Lines 94-134javascript

94 try {

95 const pidFile = getTrayPidFile();

96 if (!existsSync(pidFile)) return false;

97 const pid = parseInt(await readFile(pidFile, "utf8"), 10);

98 if (isNaN(pid)) return false;

99 return isTrayProcessRunning(pid);

100 } catch {

101 return false;

102 }

103}

104/**

105* Auto-spawn a tray process in the background if not already running.

106* Only spawns on desktop OS (macOS/Windows).

107* Silently does nothing if systray2 is not installed or on non-desktop OS.

108*/

109async function ensureTray() {

110 if (!isDesktopOS()) return;

111 if (process.env.AGENT_YES_TRAY !== "1") return;

112 if (await isTrayRunning()) return;

113 try {

114 const cliPath = new URL("./cli.ts", import.meta.url).pathname;

115 const { spawn } = await import("child_process");

116 spawn(process.execPath, [

High

Child Process

Package source references child process execution.

dist/tray-BMzpUSfa.jsView on unpkg · L114

117 cliPath,

118 "--tray",

119 "--no-rust"

120 ], {

121 detached: true,

122 stdio: "ignore",

123 env: { ...process.env }

124 }).unref();

125 } catch {}

126}

127async function startTray() {

128 if (!isDesktopOS()) {

129 console.error("Tray icon is only supported on macOS and Windows.");

130 return;

131 }

132 if (!await claimTraySingleton()) {

133 console.error("Tray is already running.");

134 return;

dist/ts--UKFJGU-.jsView file

Lines 1-34javascript

1import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";

2import { r as getInstalledPackage } from "./versionChecker-DJObC8O_.js";

3import { t as agentYesHome } from "./agentYesHome-_eJa3DaX.js";

4import { i as shouldUseLock, r as releaseLock, t as acquireLock }

dist/agent-yes.config-Bl08kMpl.jsView file

Lines 193-229javascript

193 };

194}

195

196//#endregion

197//#region agent-yes.config.ts

198logger.debug("loading cli-yes.config.ts from " + import.meta.url);

199ensureSchemaInConfigFiles().catch(() => {});

200const configDir

dist/schedule-DzFEVEoq.jsView file

Lines 39-79javascript

39/** `HH:MM` → a daily cron; otherwise a raw 5-field cron passes through. null if neither. */

40function toCron(spec) {

41 const s = spec.trim();

42 const hm = /^(\d{1,2}):(\d{2})$/.

dist/share-Bq_tDXQU.jsView file

Lines 1-41javascript

1import { a as computeTranscriptHash, c as open$1, d as randomHex, f as seal, i as MAX_CHUNK, l as packEnvelope, n as FLAG_CONFIRM, o as deriveAuthToken, p as unpackEnvelope, r as MARKER, s as deriveDirKeys, t as CONFIRM_TIMEOUT_MS, u as parseSecret } from "./e2e-Bfw7qL9O.js";

2import { mkdir, readFile, writeFile } from "fs/promises"

dist/versionChecker-DJObC8O_.jsView file

Lines 91-134javascript

91 if (existsSync(path.join(repoRoot, ".git"))) return;

92 }

93 try {

94 let latestVersion;

95 const cache = await readUpdateCache();

examples/gcp.shView file

•path = examples/gcp.sh kind = build_helper sizeBytes = 2338 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/gcp.shView on unpkg

Source & flagged code

9 flagged · loading source

dist/tray-BMzpUSfa.jsView file

114const cliPath = new URL("./cli.ts", import.meta.url).pathname; L115: const { spawn } = await import("child_process"); L116: spawn(process.execPath, [

High

Child Process

Package source references child process execution.

dist/tray-BMzpUSfa.jsView on unpkg · L114

dist/ts--UKFJGU-.jsView file

14import { fileURLToPath } from "url"; L15: import { execaCommandSync, execaSync, parseCommandString } from "execa"; L16: import { fromReadable, fromWritable } from "from-node-stream";

High

Shell

Package source references shell execution.

dist/ts--UKFJGU-.jsView on unpkg · L14

652try { L653: execSync(`${cargoCmd} --version`, { stdio: "ignore" }); L654: } catch { L655: console.warn("Warning: Rust/Cargo not found. bun-pty native module may not work."); L656: console.warn("To fix this, install Rust: https://rustup.rs/"); L657: return; ... L660: const isWindows = platform === "win32"; L661: const tempBase = isWindows ? process.env.TEMP || "C:\\Temp" : "/tmp"; L662: if (!existsSync(join(rustPtyDir, "Cargo.toml"))) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/ts--UKFJGU-.jsView on unpkg · L652

dist/agent-yes.config-Bl08kMpl.jsView file

213const legacyConfigs = await Promise.all([ L214: import(path.resolve(os.homedir(), ".agent-yes/config.ts")).catch(() => ({ default: {} })).then((mod) => mod.default), L215: import(path.resolve(process.cwd(), "node_modules/.agent-yes/config.ts")).catch(() => ({ default: {} })).then((mod) => mod.default),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/agent-yes.config-Bl08kMpl.jsView on unpkg · L213

dist/schedule-DzFEVEoq.jsView file

59stdin: "ignore", L60: stdout: capture ? "pipe" : "inherit", L61: stderr: capture ? "pipe" : "inherit" L62: }); L63: const out = capture ? await new Response(p.stdout).text() : ""; L64: return { ... L71: if (!oxmgrBin) { L72: process.stderr.write("ay schedule: oxmgr not found\n install with: cargo install oxmgr\n or: bun add -g oxmgr\n"); L73: return 1;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/schedule-DzFEVEoq.jsView on unpkg · L59

dist/share-Bq_tDXQU.jsView file

21async function getIceServers() { L22: const keyId = process.env.CF_TURN_KEY_ID; L23: const apiToken = process.env.CF_TURN_API_TOKEN; ... L27: try { L28: const r = await fetch(`https://rtc.live.cloudflare.com/v1/turn/keys/${keyId}/credentials/generate-ice-servers`, { L29: method: "POST", ... L33: }, L34: body: JSON.stringify({ ttl }), L35: signal: AbortSignal.timeout(5e3) ... L37: if (!r.ok) throw new Error(`Cloudflare TURN ${r.status}`); L38: const j = await r.json(); L39: const servers = j.iceServers?.length ? j.iceServers : STUN;

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/share-Bq_tDXQU.jsView on unpkg · L21

dist/versionChecker-DJObC8O_.jsView file

114package = claude-yes; repositoryIdentity = agent-yes; dependency = execa L114: try { L115: const { execaCommand } = await import("execa"); L116: await execaCommand(installCmd, { stdio: "inherit" });

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/versionChecker-DJObC8O_.jsView on unpkg · L114

111async function runInstall(latestVersion) { L112: const installCmd = detectPackageManager() === "bun" ? `bun add -g ${CANONICAL_PKG_NAME}@${latestVersion}` : `npm install -g ${CANONICAL_PKG_NAME}@${latestVersion}`; L113: process.stderr.write(`\x1b[33m[agent-yes] Updating ${getInstalledPackage().version} → ${latestVersion}…\x1b[0m\n`); L114: try { L115: const { execaCommand } = await import("execa"); L116: await execaCommand(installCmd, { stdio: "inherit" });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/versionChecker-DJObC8O_.jsView on unpkg · L111

examples/gcp.shView file

•path = examples/gcp.sh kind = build_helper sizeBytes = 2338 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/gcp.shView on unpkg

Findings

6 High5 Medium6 Low

HighChild Processdist/tray-BMzpUSfa.js

HighShelldist/ts--UKFJGU-.js

HighSame File Env Network Executiondist/ts--UKFJGU-.js

HighCredential Exfiltrationdist/share-Bq_tDXQU.js

HighCopied Package Dependency Bridgedist/versionChecker-DJObC8O_.js

HighRuntime Package Installdist/versionChecker-DJObC8O_.js

MediumDynamic Requiredist/agent-yes.config-Bl08kMpl.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperexamples/gcp.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/schedule-DzFEVEoq.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/tray-BMzpUSfa.jsView file

Lines 94-134javascript

94 try {

95 const pidFile = getTrayPidFile();

96 if (!existsSync(pidFile)) return false;

97 const pid = parseInt(await readFile(pidFile, "utf8"), 10);

98 if (isNaN(pid)) return false;

99 return isTrayProcessRunning(pid);

100 } catch {

101 return false;

102 }

103}

104/**

105* Auto-spawn a tray process in the background if not already running.

106* Only spawns on desktop OS (macOS/Windows).

107* Silently does nothing if systray2 is not installed or on non-desktop OS.

108*/

109async function ensureTray() {

110 if (!isDesktopOS()) return;

111 if (process.env.AGENT_YES_TRAY !== "1") return;

112 if (await isTrayRunning()) return;

113 try {

114 const cliPath = new URL("./cli.ts", import.meta.url).pathname;

115 const { spawn } = await import("child_process");

116 spawn(process.execPath, [

High

Child Process

Package source references child process execution.

dist/tray-BMzpUSfa.jsView on unpkg · L114

117 cliPath,

118 "--tray",

119 "--no-rust"

120 ], {

121 detached: true,

122 stdio: "ignore",

123 env: { ...process.env }

124 }).unref();

125 } catch {}

126}

127async function startTray() {

128 if (!isDesktopOS()) {

129 console.error("Tray icon is only supported on macOS and Windows.");

130 return;

131 }

132 if (!await claimTraySingleton()) {

133 console.error("Tray is already running.");

134 return;

dist/ts--UKFJGU-.jsView file

Lines 1-34javascript

1import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";

2import { r as getInstalledPackage } from "./versionChecker-DJObC8O_.js";

3import { t as agentYesHome } from "./agentYesHome-_eJa3DaX.js";

4import { i as shouldUseLock, r as releaseLock, t as acquireLock }

dist/agent-yes.config-Bl08kMpl.jsView file

Lines 193-229javascript

193 };

194}

195

196//#endregion

197//#region agent-yes.config.ts

198logger.debug("loading cli-yes.config.ts from " + import.meta.url);

199ensureSchemaInConfigFiles().catch(() => {});

200const configDir

dist/schedule-DzFEVEoq.jsView file

Lines 39-79javascript

39/** `HH:MM` → a daily cron; otherwise a raw 5-field cron passes through. null if neither. */

40function toCron(spec) {

41 const s = spec.trim();

42 const hm = /^(\d{1,2}):(\d{2})$/.

dist/share-Bq_tDXQU.jsView file

Lines 1-41javascript

2import { mkdir, readFile, writeFile } from "fs/promises"

dist/versionChecker-DJObC8O_.jsView file

Lines 91-134javascript

91 if (existsSync(path.join(repoRoot, ".git"))) return;

92 }

93 try {

94 let latestVersion;

95 const cache = await readUpdateCache();

examples/gcp.shView file

•path = examples/gcp.sh kind = build_helper sizeBytes = 2338 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/gcp.shView on unpkg

Lines 632-672javascript

632 } catch (error) {

633 return catchFn(error, attempts, robustFn, ...args);

634 }

635 };

636}

637

638//#endregion

639//#region ts/pty-fix.ts

640var pty_fix_exports = /* @__PURE__ */ __exportAll({});

641function getLibraryName() {

642 switch (platform) {

643 case "win32": return "rust_pty.dll";

644 case "darwin": return arch === "arm64" ? "librust_pty_arm64.dylib" : "librust_pty.dylib";

645 case "linux": return arch === "arm64" ? "librust_pty_arm64.so" : "librust_pty.so";

646 default: return "librust_pty.so";

647 }

648}

649function rebuildBunPty() {

650 try {

651 const cargoCmd = platform === "win32" ? "cargo.exe" : "cargo";

652 try {

653 execSync(`${cargoCmd} --version`, { stdio: "ignore" });

654 } catch {

655 console.warn("Warning: Rust/Cargo not found. bun-pty native module may not work.");

656 console.warn("To fix this, install Rust: https://rustup.rs/");

657 return;

658 }

659 const rustPtyDir = join(bunPtyPath, "rust-pty");

660 const isWindows = platform === "win32";

661 const tempBase = isWindows ? process.env.TEMP || "C:\\Temp" : "/tmp";

662 if (!existsSync(join(rustPtyDir, "Cargo.toml"))) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/ts--UKFJGU-.jsView on unpkg · L652

663 console.log("Source code not found in npm package, cloning from repository...");

664 const tmpDir = join(tempBase, `bun-pty-build-${Date.now()}`);

665 try {

666 execSync(`git clone https://github.com/snomiao/bun-pty.git "${tmpDir}"`, { stdio: "inherit" });

667 if (isWindows) execSync(`cd /d "${tmpDir}" && cargo build --release --manifest-path rust-pty\\Cargo.toml`, { stdio: "inherit" });

668 else execSync(`cd "${tmpDir}" && cargo build --release --manifest-path rust-pty/Cargo.toml`, { stdio: "inherit" });

669 const builtLib = join(tmpDir, "rust-pty", "target", "release", libName);

670 if (existsSync(builtLib)) {

671 const targetDir = join(rustPtyDir, "target", "release");

672 if (isWindows) {